XSS Can't reproduce vulnerability

Questions or requests about submissions
Post Reply
Psycho__Coder
Posts:16
Joined:Tue Mar 06, 2018 7:09 am
Contact:
XSS Can't reproduce vulnerability

Post by Psycho__Coder » Wed Mar 07, 2018 11:19 am

Hello,

I submitted two reports, one yesterday and one today. It was said that you were unable to reproduce the XSS.

The links are:

1. https://www.openbugbounty.org/reports/574819/ [Reported Yesterday]

Video PoC for the above: https://files.animeshshaw.com/index.php ... tsmOU4MX75

2. https://www.openbugbounty.org/reports/575600/ [Reported Today]

Visit the link below to confirm the PoC.

http://links.kinto.nl/launch.php?link_i ... fscript%3E

Note: I have tested the above with Firefox.

Kindly let me know if they can be approved now. If there's is something else please let me know. Thanks and Regards,

User avatar
x1admin
Site Admin
Posts:3102
Joined:Sun Nov 15, 2015 7:04 pm

Re: XSS Can't reproduce vulnerability

Post by x1admin » Thu Mar 08, 2018 7:58 am

Looks like you forgot to provide vulnerable url
You report just http://links.kinto.nl/launch.php w/o parameters

Psycho__Coder
Posts:16
Joined:Tue Mar 06, 2018 7:09 am
Contact:

Re: XSS Can't reproduce vulnerability

Post by Psycho__Coder » Thu Mar 08, 2018 9:47 am

x1admin wrote:
Thu Mar 08, 2018 7:58 am
Looks like you forgot to provide vulnerable URL
You report just http://links.kinto.nl/launch.php w/o parameters
Sorry about that. I have realized this mistake now. I have made a few other successful submissions. Is there a possibility that you can edit the Vulnerable URL from your end because I cannot edit the report from my end.

EDIT: I resubmitted the PoC and now it was accepted for the "links.kinto.nl" website. But still waiting on the hifi.nl site (Video PoC given)

Regards,
Psycho_Coder

User avatar
x1admin
Site Admin
Posts:3102
Joined:Sun Nov 15, 2015 7:04 pm

Re: XSS Can't reproduce vulnerability

Post by x1admin » Fri Mar 09, 2018 8:27 am

Psycho__Coder wrote:
Thu Mar 08, 2018 9:47 am
x1admin wrote:
Thu Mar 08, 2018 7:58 am
Looks like you forgot to provide vulnerable URL
You report just http://links.kinto.nl/launch.php w/o parameters
Sorry about that. I have realized this mistake now. I have made a few other successful submissions. Is there a possibility that you can edit the Vulnerable URL from your end because I cannot edit the report from my end.

EDIT: I resubmitted the PoC and now it was accepted for the "links.kinto.nl" website. But still waiting on the hifi.nl site (Video PoC given)

Regards,
Psycho_Coder
approved hifi.nl

Psycho__Coder
Posts:16
Joined:Tue Mar 06, 2018 7:09 am
Contact:

Re: XSS Can't reproduce vulnerability

Post by Psycho__Coder » Fri Mar 09, 2018 10:47 am

x1admin wrote:
Fri Mar 09, 2018 8:27 am
Psycho__Coder wrote:
Thu Mar 08, 2018 9:47 am
x1admin wrote:
Thu Mar 08, 2018 7:58 am
Looks like you forgot to provide vulnerable URL
You report just http://links.kinto.nl/launch.php w/o parameters
Sorry about that. I have realized this mistake now. I have made a few other successful submissions. Is there a possibility that you can edit the Vulnerable URL from your end because I cannot edit the report from my end.

EDIT: I resubmitted the PoC and now it was accepted for the "links.kinto.nl" website. But still waiting on the hifi.nl site (Video PoC given)

Regards,
Psycho_Coder
approved hifi.nl
Thank You

Post Reply

Who is online

Users browsing this forum: No registered users and 2 guests